An information processing method and device, equipment, and storage medium
By using the parent process ID and digital signature to identify bundled installation behavior during the application installation process, the problem of untimely updates in existing technologies is solved, enabling dynamic identification and accurate interception of bundled applications and reducing manual maintenance costs.
Patent Information
- Application Number
- CN202110185210.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-02-10
- Publication Date
- 2025-10-28
- Estimated Expiration
- 2041-02-10
Smart Images

Figure CN112800434B_ABST
Abstract
Description
Technical Field
[0001] The embodiments of this application relate to, but are not limited to, electronic technology, and in particular to an information processing method, apparatus, device, and storage medium. Background Technology
[0002] In related technologies, the method for intercepting bundled applications is as follows: First, the names of bundled applications are manually collected, and bundled applications are prohibited from accessing the installation directory and their download addresses are blocked. Then, when a user installs an application, if the application is detected to contain bundled features that match the feature information in a pre-established bundled feature library, the application is prevented from being installed on the system.
[0003] However, in related technologies, intercepting bundled applications requires establishing a pre-defined bundled feature library, and then identifying applications based on this library. This can lead to untimely updates and an inability to keep up with changes in bundled applications. Summary of the Invention
[0004] In view of the above, this application provides an information processing method, apparatus, device, and storage medium to solve at least one problem existing in the related art.
[0005] The technical solution of this application embodiment is implemented as follows:
[0006] In a first aspect, embodiments of this application provide an information processing method, the method comprising:
[0007] In response to an installation operation for the first application, obtain the installation process created by the first application;
[0008] Based on the installation process, determine the attribute information of the installation process;
[0009] Based on the attribute information, determine whether the installation operation for the first application is a bundled installation operation.
[0010] Secondly, embodiments of this application provide an information processing apparatus, the apparatus comprising:
[0011] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0012] The first determining module is used to determine the attribute information of the installation process based on the installation process;
[0013] The second determining module is used to determine, based on the attribute information, whether the installation operation for the first application is a bundled installation operation.
[0014] Thirdly, embodiments of this application provide an electronic device, including:
[0015] Memory, used to store executable instructions;
[0016] The processor, when executing executable instructions stored in the memory, implements the method described above.
[0017] Fourthly, embodiments of this application provide a computer-readable storage medium storing executable instructions for implementing the above-described method when executed by a processor.
[0018] In this embodiment, in response to an installation operation on a first application, the installation process created by the first application is obtained; based on the installation process, attribute information of the installation process is determined; and based on the attribute information, it is determined whether the installation operation on the first application is a bundled installation operation. This allows for dynamic identification of bundled application installation behavior without the need to establish a preset bundled feature database, set a blacklist for application certificates, or prohibit access to the installation directory of a specified application or block download addresses, thus reducing manual maintenance costs and offering strong applicability. Attached Figure Description
[0019] Figure 1 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application;
[0020] Figure 2 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application;
[0021] Figure 3 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application;
[0022] Figure 4 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application;
[0023] Figure 5A This is a schematic diagram of the application bundled during the installation process of the application in the embodiments of this application;
[0024] Figure 5B This is a schematic diagram illustrating the implementation flow of the information processing method in the embodiments of this application.
[0025] Figure 6 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application;
[0026] Figure 7 This is a schematic diagram of a hardware entity of an electronic device in an embodiment of this application. Detailed Implementation
[0027] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application are further described in detail below with reference to the accompanying drawings and embodiments. The described embodiments should not be regarded as limitations on this application. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0028] In the following description, references are made to “some embodiments,” which describe a subset of all possible embodiments. However, it is understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.
[0029] If the application documents contain similar descriptions such as "first / second", the following explanation shall be added: In the following description, the terms "first / second / third" are used only to distinguish similar objects and do not represent a specific order of objects. It is understood that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of this application described herein can be implemented in an order other than that illustrated or described herein.
[0030] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.
[0031] The technical solution of this application will be further described in detail below with reference to the accompanying drawings and embodiments.
[0032] This application provides an information processing method. Figure 1 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application, as shown below. Figure 1 As shown, the method includes:
[0033] Step S110: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0034] Here, the first application can be an application that the user actively triggers to install, or it can be another application launched by an application that the user actively triggers to install. For example, the first application can be a Pinyin input method that the user installs from File Explorer, or it can be another application that is bundled and launched during the installation process of the Pinyin input method, such as a desktop assistant, a browser, or other applications.
[0035] Here, the installation process can be a user-initiated execution of an installed application on the processor; or it can be a user-initiated execution of another application launched by the installed application on the processor.
[0036] Step S120: Based on the installation process, determine the attribute information of the installation process;
[0037] Here, the identifier is used to distinguish different installation processes. The attribute information of the installation process may include: the parent process ID of the installation process, and / or, the digital signature of the installation process. Here, a digital signature refers to an electronic security tag that can be added to the application installation package. A digital signature can verify the publisher of a file and help verify whether the file has been altered since it was digitally signed. If a file does not have a valid digital signature, it cannot be guaranteed that the file actually comes from its claimed source, or that it has not been tampered with after publication.
[0038] In some embodiments, there is a one-to-one mapping between the identifier of the installation process and the parent process ID in the attribute information of the installed process; there is a one-to-one, one-to-many, or many-to-many mapping between the identifier of the installation process and the digital signature of the installation process in the attribute information of the installed process. The corresponding parent process ID can be uniquely found based on the identifier of the installation process, or the digital signature of the installation process can be found.
[0039] Step S130: Determine whether the installation operation for the first application is a bundled installation operation based on the attribute information.
[0040] In some embodiments, the attribute information of the installation process is the parent process ID. Step S120, determining the attribute information of the installation process based on the installation process, includes: step S121, determining the parent process ID of the installation process based on the installation process.
[0041] In some embodiments, the method further includes: terminating the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation; or, displaying a prompt message if it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0042] In this embodiment, in response to an installation operation on a first application, the installation process created by the first application is obtained; based on the installation process, attribute information of the installation process is determined; and based on the attribute information, it is determined whether the installation operation on the first application is a bundled installation operation. This allows for dynamic identification of bundled application installation behavior without the need to establish a preset bundled feature database, set a blacklist for application certificates, or prohibit access to the installation directory of a specified application or block download addresses, thus reducing manual maintenance costs and offering strong applicability.
[0043] This application provides an information processing method in which the attribute information of the installation process is the parent process ID of the installation process. Figure 2 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application, as shown below. Figure 2 As shown, the method includes:
[0044] Step S210: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0045] Step S220: Based on the installation process, determine the parent process ID of the installation process;
[0046] Step S230: Determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process;
[0047] In some operating systems, the relationships between processes can be represented using a process tree, which consists of parent processes and child processes. For example, in Windows, some program processes, after running, call other processes, thus forming a process tree. A process tree consists of several system processes and the relationships between them. Each process in the process tree is a node in the tree. If process A creates process B, then A is said to be the parent process of B, and B is said to be the child process of A. If a process is not a child process of any other process, it is called the root process or the ancestor of a process family. In this example, if the parent process of the installation process is process A, then process A starts the installation process, and the installation process is a child process of process A.
[0048] Here, if the parent process ID of the installation process is the operating system's resource manager, then the installation process is the process of the user-triggered installer.
[0049] Step S240: If the parent process belongs to the operating system's resource manager, determine that the installation operation for the first application is a legitimate installation operation;
[0050] Here, a legitimate installation operation is an application that is actively triggered by the user and requires installation.
[0051] In practice, if the process of the installation program is a user-triggered installation program, it is determined that the first application corresponding to the process is the application that needs to be installed, and the installation operation is a legitimate installation operation.
[0052] Step S250: If the parent process does not belong to the operating system's resource manager, determine that the installation operation for the first application is a bundled installation operation.
[0053] During implementation, the parent process does not belong to the operating system's resource manager. At this time, the process of the installer is not the process of the installer triggered by the user. Therefore, it is determined that the process of the installer is another application launched by the application actively triggered by the user, and the operation of installing other applications is determined to be a bundled installation operation.
[0054] Steps S230 to S250 here provide a way to implement step S130.
[0055] In some embodiments, the method further includes: terminating the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation; or, displaying a prompt message if it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0056] In this embodiment, the parent process ID of the first application's installer is used to determine which application launched the first application. If the first application was installed by File Explorer, then the first application is a legitimate application. If the first application was not installed by File Explorer, then the first application is a bundled application. Bundled applications may or may not be user-authorized. In some embodiments, applications that are not user-authorized can be blocked.
[0057] In this embodiment, the validity of the first application's installation operation is determined by whether the parent process ID belongs to the operating system's resource manager. This allows for dynamic identification of bundled installation operations by judging the legitimacy of the application through the parent process ID, thus avoiding the need to establish a pre-defined bundled feature database and preventing misjudgments and omissions caused by untimely updates to the database, thereby improving the accuracy of bundled installation operations.
[0058] This application provides an information processing method, the method comprising:
[0059] Step S301: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0060] Step S302: Based on the installation process, determine the parent process ID of the installation process;
[0061] Step S303: Determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process;
[0062] Step S304: If the parent process does not belong to the operating system's resource manager, obtain the identifier of the second application corresponding to the parent process ID;
[0063] During implementation, if the parent process does not belong to the operating system's resource manager, it is determined that the process of the installer is another application launched by the application actively installed by the user. In this case, it is necessary to obtain the application's identifier.
[0064] Step S305: Based on the identifier of the first application, determine the authorization information, wherein the authorization information is information on the bundled installation of the first application obtained during the installation process of the second application;
[0065] Here, the authorization information includes information on which applications need to be installed, and the authorization information includes the identifier of at least one application.
[0066] During implementation, the identifier of the second application is searched in the authorization information. When an identifier corresponding to the second application is found, it is determined that the user has authorized the installation of the second application.
[0067] Step S306: If the authorization information does not include the identifier of the first application, determine that the installation operation for the first application is a bundled installation operation.
[0068] During implementation, if the authorization information does not include the identifier of the second application, it is determined that the user has not authorized the installation of the second application, and the installation operation of the second application is a bundled installation operation.
[0069] In some embodiments, step S305 involves determining authorization information based on the identifier of the second application, wherein the authorization information is information regarding the bundled installation of the first application obtained during the installation process of the second application, including:
[0070] Step S3051: Monitor the installation process of the second application;
[0071] Here, the installation process may include: unzipping the installation package, extracting installation information, displaying the installation interface, and determining the installation path.
[0072] Step S3052: If at least one checkbox appears in the installation window of the second application, determine the target checkbox based on at least one selection operation for the at least one checkbox;
[0073] Here, each of the second applications corresponds to a checkbox, which is provided to the user for operation. When the user checks the checkbox, the second application corresponding to the checkbox will be installed by default during the installation process.
[0074] Here, the target checkbox indicates that the user agrees to install the second application corresponding to the checkbox.
[0075] Step S3053: Obtain the label information of the target checkbox, which serves as the authorization information for the bundled installation of the first application obtained during the installation process of the second application.
[0076] During implementation, the identifier of the application corresponding to the checkbox constitutes the authorization information.
[0077] In some embodiments, the method further includes: terminating the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation; or, displaying a prompt message if it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0078] In this embodiment, the installation process of the second application is monitored. If at least one checkbox appears in the installation window of the second application, a target checkbox is determined based on at least one selection operation of the at least one checkbox. The label information of the target checkbox is obtained, and the label information serves as the authorization information for the bundled installation of the first application obtained during the installation process of the second application. Thus, when bundled applications are authorized for installation, the necessary bundled applications can be installed according to the authorization information, avoiding blocking bundled applications needed by the user, improving the selectivity of the interception operation, and enhancing the user experience.
[0079] This application provides an information processing method, the method comprising:
[0080] Step S31: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0081] Step S32: Determine the digital signature of the installation process based on the installation process;
[0082] Here, the installation process refers to the installation process of a bundled application. The parent process of the installation process is File Explorer. The first application corresponding to the installation process has a bundled application; in this case, the installation process is the parent process of the bundled application. Here, the digital signature of the installation process is the digital signature of the parent process of the bundled application.
[0083] Step S33: Monitor the installation process of the first application and obtain the digital signature of the child process of the installation process;
[0084] Here, the child process of the installation process is used to install bundled software of the first application during the installation of the first application. For example, during the installation of an input method application, the child process may install bundled software such as browsers, compression software, audio / video players, novel readers, security suites, and desktop assistants.
[0085] Step S34: If the digital signature of the installation process is different from the digital signature of the child process, determine that the installation operation of the third application corresponding to the child process is a bundled installation operation.
[0086] Here, the fact that the digital signature of the installation process and the digital signature of the child process are different indicates that the first application and the application installed by the child process are not from the same manufacturer.
[0087] For example, because each application has a unique digital signature, the digital signature of an application is different from the digital signatures of each of the bundled applications. In cases where the digital signatures of the application and the browser differ, the browser is identified as a bundled application.
[0088] In this embodiment, the installation operation of the third application corresponding to the installation process is determined as an illegal installation operation based on the digital signature of the installation process and the digital signature of the child process. This allows for dynamic identification of bundled applications based on the digital signature of the application the user needs to install, simplifying the application judgment process.
[0089] This application provides an information processing method. Figure 3 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application, as shown below. Figure 3 As shown, the method includes:
[0090] Step S310: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0091] Step S320: Based on the installation process, determine the attribute information of the installation process;
[0092] Step S330: Determine whether the installation operation for the first application is a bundled installation operation based on the attribute information;
[0093] Step S340: If it is determined that the installation operation for the first application is a bundled installation operation, the installation of the first application is terminated.
[0094] In this embodiment of the application, when the first application is identified as a bundled application, the installation of the first application is automatically and proactively terminated, thus blocking the bundled application without disturbing the user.
[0095] In implementation, the methods provided in the embodiments of this application can be a system-level application. This application may have some settings options, such as whether the user can set whether to automatically block or pop up a dialog box to ask whether to block. When the user selects to enable the automatic blocking option, in response to the user enabling the automatic blocking option, the application implementing the method receives the user's automatic blocking instruction. Based on the automatic blocking instruction, if the first application is identified as a bundled application, the installation of the first application is automatically terminated.
[0096] This application provides an information processing method. Figure 4 This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application, as shown below. Figure 4 As shown, the method includes:
[0097] Step S410: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0098] Step S420: Based on the installation process, determine the attribute information of the installation process;
[0099] Step S430: Determine whether the installation operation for the first application is a bundled installation operation based on the attribute information;
[0100] Step S440: If it is determined that the installation operation for the first application is a bundled installation operation, a prompt message is displayed; the prompt message is used to inform the user that the first application is a bundled installation application.
[0101] In this embodiment, when the first application is identified as a bundled application, a prompt message is automatically displayed. For example, the prompt message can be a dialog box reminding the user that the first application is a bundled application. It should be noted that during the prompt message output process, the installation of the first application can be paused. Upon receiving feedback from the user based on the prompt message, if the feedback indicates that the user chooses to install the first application, the installation continues; if the feedback indicates that the user chooses not to install the first application, the installation is terminated. In this way, obtaining user authorization for the installation of bundled applications through prompt messages is more user-friendly, improves the user experience, avoids the installation of useless applications with similar functions, thereby improving the resource utilization of electronic devices and saving energy.
[0102] In implementation, the methods provided in the embodiments of this application can be a system-level application. This application may have some settings options, such as whether the user can set whether to automatically block or pop up a dialog box to ask whether to block. When the user selects the option to pop up a dialog box to ask whether to block, in response to the user's selected option, the application implementing the method receives the user's pop-up command. Based on the pop-up command, if the first application is identified as a bundled application, a dialog box pops up to prompt the user that the first application is a bundled application.
[0103] This application provides an information processing method, wherein if the parent process belongs to the operating system's resource manager, the installation operation on the first application is a legitimate installation operation, and the attribute information of the installation process includes the parent process ID of the installation process and the digital signature of the installation process. The method includes:
[0104] Step S610: In response to the installation operation for the first application, obtain the installation process created by the first application;
[0105] Step S620: Based on the installation process, obtain the digital signature of the installation process and the parent process ID of the installation process;
[0106] Here, the installation process refers to the installation process of a bundled application. The parent process of the installation process is File Explorer. The first application corresponding to the installation process has a bundled application; in this case, the installation process is the parent process of the bundled application. Here, the digital signature of the installation process is the digital signature of the parent process of the bundled application.
[0107] Step S630: Determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process;
[0108] Step S640: If the parent process belongs to the operating system's resource manager, determine that the installation operation for the first application is a legitimate installation operation;
[0109] Step S650: In response to the fact that the installation operation of the first application is a legitimate installation operation, monitor the installation process of the first application and obtain the digital signature of the child process of the installation process.
[0110] Here, the child process of the installation process is used to install bundled software of the first application during the installation of the first application. For example, during the installation of an input method application, the child process may install bundled software such as browsers, compression software, audio / video players, novel readers, security suites, and desktop assistants.
[0111] Step S660: If the digital signature of the installation process is different from the digital signature of the child process, determine that the installation operation of the third application corresponding to the child process is a bundled installation operation.
[0112] Here, the fact that the digital signature of the installation process and the digital signature of the child process are different indicates that the first application and the application installed by the child process are not from the same manufacturer.
[0113] For example, because each application has a unique digital signature, the digital signature of an application is different from the digital signatures of each of the bundled applications. In cases where the digital signatures of the application and the browser differ, the browser is identified as a bundled application.
[0114] In some embodiments, the method further includes: terminating the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation; or, displaying a prompt message if it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0115] In this embodiment of the application, even if the first application is a legitimate application, other applications may be bundled and installed during the installation process of the first application. This embodiment of the application monitors the installation process of the first application, for example by monitoring the child processes started by the installation process, and then comparing whether the digital signatures of the installation process and the child processes are the same to determine whether the first application has bundled and installed other applications.
[0116] When a user installs an application, bundled applications such as music players, input methods, online video players, and virus protectors are also installed. The first dialog box for installing an application provides a "Quick Install" button. If the custom button next to the "Quick Install" button is not clicked, the bundled applications are not displayed in the first dialog box, and the checkboxes for the bundled applications are checked by default. If the checkboxes are checked, the installation process will install the bundled applications by default.
[0117] In related technologies, the method for intercepting bundled applications is as follows: First, the names of bundled applications are manually collected, and bundled applications are prohibited from accessing the installation directory and their download addresses are blocked. Then, when a user installs an application, if the application is detected to contain bundled features that match the feature information in a pre-established bundled feature library, the application is prevented from being installed on the system.
[0118] However, in related technologies, intercepting bundled applications requires establishing a pre-defined bundled feature library, and then identifying applications based on this library. This can lead to untimely updates and an inability to keep up with changes in bundled applications.
[0119] To address the aforementioned problems in related technologies, embodiments of this application provide an information processing method. Figure 5B This is a schematic diagram illustrating the implementation flow of the information processing method in an embodiment of this application, as shown below. Figure 5B As shown, the method includes:
[0120] Step S510: When the main installation process starts, obtain the digital signature of the main installation process for subsequent use;
[0121] Here, the main installation process can be a process used to install the applications required by the user, such as a parent process.
[0122] In some embodiments, when the main installation process is the parent process, the digital signature of the parent process is obtained when the parent process starts; the parent process is used to install the first application.
[0123] Here, a digital signature refers to an electronic security tag that can be added to an application installation package. A digital signature can verify the publisher of a file and help verify whether the file has been altered since it was digitally signed. If a file does not have a valid digital signature, it cannot be guaranteed that the file actually comes from its claimed source, or that it has not been tampered with after its release.
[0124] Step S520: During the installation process, monitor new processes started by the main program;
[0125] Here, the main program is the program installed in the main installation process. The main program can be the first application. The new process can be a child process.
[0126] Step S530: Obtain the digital signature of the new process;
[0127] In step S540, the digital signatures obtained in steps S510 and S530 are compared. If they are not digital signatures from the same manufacturer, the newly launched installer is identified as bundled software.
[0128] For example, if the digital signatures of the parent process and the child process are different, it can be determined that the application installed by the child process is a bundled application.
[0129] Here, the fact that the digital signatures of the parent process and the child process are different indicates that the first application and the application installed by the child process are not from the same manufacturer.
[0130] In step S550, the bundled application can be identified according to steps S510 to S540.
[0131] For example, it can block browsers, compression software, video and audio programs, novels, security suites, and desktop assistants.
[0132] For example, such as Figure 5A As shown, during the installation process of application 51, bundled applications 52 will be installed, such as browsers, compression software, video players, novel readers, security suites, and desktop assistants. Since each application has a unique digital signature, the digital signature of application 51 is different from the digital signatures of each bundled application in application 52. When the digital signatures of application 51 and the browser differ, the browser is identified as a bundled application.
[0133] In this embodiment, when an application is installed via a parent process and the child process is started, the process first checks the digital signature of the child process; second, it compares the digital signature of the parent process with that of the child process; and finally, it determines whether the application is bundled based on the comparison result. If the comparison results are different, it is determined that the child process is installing a bundled application. This dynamically identifies the installation of bundled applications without requiring a pre-defined bundle signature database, a blacklist for application certificates, or restrictions on accessing the installation directory or download links of specific applications, thus reducing manual maintenance costs and offering broad applicability.
[0134] Based on the foregoing embodiments, this application provides an information processing device, which includes various modules and units included in each module. Each sub-unit included in each unit can be implemented by a processor in an electronic device; of course, it can also be implemented by specific logic circuits. In the implementation process, the processor can be a central processing unit (CPU), microprocessor (MPU), digital signal processor (DSP), or field programmable gate array (FPGA), etc.
[0135] Figure 6 This is a schematic diagram of the composition structure of the information processing device according to an embodiment of this application, as shown below. Figure 6 As shown, the device 600 includes a first obtaining module 601, a first determining module 602, and a second determining module 603, wherein:
[0136] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0137] The first determining module is used to determine the attribute information of the installation process based on the installation process;
[0138] The second determining module is used to determine, based on the attribute information, whether the installation operation for the first application is a bundled installation operation.
[0139] In some embodiments, the first determining module is configured to determine the parent process ID of the installation process based on the installation process.
[0140] This application provides an information processing apparatus in which the attribute information of the installation process is the parent process ID of the installation process. Correspondingly, the apparatus includes a first obtaining module, a first determining module, and a second determining module. The second determining module includes a first determining unit, a second determining unit, and a third determining unit, wherein:
[0141] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0142] The first determining module is used to determine the parent process ID of the installation process based on the installation process;
[0143] The first determining unit is used to determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process.
[0144] The second determining unit is configured to determine that the installation operation for the first application is a legitimate installation operation if the parent process belongs to the resource manager of the operating system.
[0145] The third determining unit is configured to determine that the installation operation for the first application is a bundled installation operation if the parent process does not belong to the operating system's resource manager.
[0146] In some embodiments, the device further includes a termination module or a display module, wherein:
[0147] The termination module is used to terminate the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation.
[0148] The display module is used to display a prompt message when it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0149] This application provides an information processing device, wherein the attribute information of the installation process is the parent process ID of the installation process. Correspondingly, the device includes a first obtaining module, a first determining module, and a second determining module. The second determining module includes a first determining unit, a second determining unit, and a third determining unit. The third determining unit includes a first obtaining subunit, a first determining subunit, and a second determining subunit.
[0150] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0151] The first determining module is used to determine the parent process ID of the installation process based on the installation process.
[0152] The first determining unit is used to determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process.
[0153] The second determining unit is configured to determine that the installation operation for the first application is a legitimate installation operation if the parent process belongs to the resource manager of the operating system.
[0154] The first acquisition subunit is used to obtain the identifier of the second application corresponding to the parent process ID if the parent process does not belong to the resource manager of the operating system.
[0155] The first determining subunit is configured to determine authorization information based on the identifier of the second application, wherein the authorization information is information on the bundled installation of the first application obtained during the installation process of the second application;
[0156] The second determining subunit is configured to determine that the installation operation for the first application is a bundled installation operation if the authorization information does not include the identifier of the first application.
[0157] In some embodiments, the device further includes a termination module or a display module, wherein:
[0158] The termination module is used to terminate the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation.
[0159] The display module is used to display a prompt message when it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0160] In some embodiments, the first determining subunit is configured to monitor the installation process of the second application; if at least one checkbox appears in the installation window of the second application, a target checkbox is determined based on at least one selection operation of the at least one checkbox; and the label information of the target checkbox is obtained as authorization information for bundled installation of the first application obtained during the installation process of the second application.
[0161] This application provides an information processing device, wherein if the parent process belongs to the operating system's resource manager, the installation operation on the first application is a legitimate installation operation, and the attribute information of the installation process includes the parent process ID and the digital signature of the installation process. Correspondingly, the device includes a first obtaining module, a first determining module, a second determining module, a monitoring module, and a third determining module, wherein the second determining module includes a first determining unit, a second determining unit, and a third determining unit, wherein:
[0162] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0163] The first determining module is used to determine the digital signature of the installation process and the parent process ID of the installation process based on the installation process;
[0164] The first determining unit is used to determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process.
[0165] The second determining unit is configured to determine that the installation operation for the first application is a legitimate installation operation if the parent process belongs to the resource manager of the operating system.
[0166] The monitoring module is used to monitor the installation process of the first application and obtain the digital signature of the child process of the installation process when the installation operation of the first application is a legitimate installation operation.
[0167] The third determining module is used to determine that the installation operation of the third application corresponding to the subprocess is a bundled installation operation if the digital signature of the installation process is different from the digital signature of the subprocess.
[0168] In some embodiments, the device further includes a termination module or a display module, wherein:
[0169] The termination module is used to terminate the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation.
[0170] The display module is used to display a prompt message when it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0171] This application provides an information processing apparatus, which includes a first obtaining module, a first determining module, a second determining module, and a termination module, wherein:
[0172] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0173] The first determining module is used to determine the attribute information of the installation process based on the installation process;
[0174] The second determining module is used to determine, based on the attribute information, whether the installation operation for the first application is a bundled installation operation.
[0175] The termination module is used to terminate the installation of the first application if it is determined that the installation operation for the first application is a bundled installation operation.
[0176] This application provides an information processing device, which includes a first obtaining module, a first determining module, a second determining module, and a display module, wherein:
[0177] The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application.
[0178] The first determining module is used to determine the attribute information of the installation process based on the installation process;
[0179] The second determining module is used to determine, based on the attribute information, whether the installation operation for the first application is a bundled installation operation.
[0180] The display module is used to display a prompt message when it is determined that the installation operation for the first application is a bundled installation operation; the prompt message is used to inform the user that the first application is a bundled installation application.
[0181] The description of the above device embodiment is similar to the description of the above method embodiment and has similar beneficial effects as the method embodiment. For technical details not disclosed in the device embodiment of this application, please refer to the description of the method embodiment of this application for understanding.
[0182] It should be noted that, in the embodiments of this application, if the above-described information processing method is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiments of this application, or the part that contributes to the related technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause an electronic device (which may be a personal computer, mobile phone, tablet computer, etc.) to execute all or part of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, mobile hard drives, read-only memory (ROM), magnetic disks, or optical disks. Thus, the embodiments of this application are not limited to any specific hardware and software combination.
[0183] Correspondingly, embodiments of this application provide an electronic device, including:
[0184] Memory, used to store executable instructions;
[0185] A processor, used to implement the above-described information processing method when executing executable instructions stored in the memory.
[0186] Correspondingly, embodiments of this application provide a computer-readable storage medium storing executable instructions for implementing the above-described information processing method when executed by a processor.
[0187] It should be noted that the descriptions of the storage medium and device embodiments above are similar to the descriptions of the method embodiments above, and have similar beneficial effects. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.
[0188] It should be noted that, Figure 7This is a schematic diagram of a hardware entity of an electronic device in an embodiment of this application, such as... Figure 7 As shown, the hardware entity of the electronic device 700 includes: a processor 701, a communication interface 702, and a memory 703, wherein...
[0189] The processor 701 typically controls the overall operation of the electronic device 700.
[0190] Communication interface 702 enables electronic devices to communicate with other terminals or servers via a network.
[0191] The memory 703 is configured to store instructions and applications executable by the processor 701, and can also cache data to be processed or already processed (e.g., image data, audio data, voice communication data and video communication data) in the processor 701 and various modules in the electronic device 700. It can be implemented by flash memory or random access memory (RAM).
[0192] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of this application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. It should be understood that in the various embodiments of this application, the sequence numbers of the above-described processes do not imply a sequential order of execution; the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above-described embodiments are merely descriptive and do not represent the superiority or inferiority of the embodiments.
[0193] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.
[0194] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods, such as: multiple units or components can be combined, or integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the various components shown or discussed can be through some interfaces, and the indirect coupling or communication connection between devices or units can be electrical, mechanical, or other forms.
[0195] The units described above as separate components may or may not be physically separate. The components shown as units may or may not be physical units. They may be located in one place or distributed across multiple network units. Some or all of the units may be selected to achieve the purpose of this embodiment according to actual needs.
[0196] In addition, each functional unit in the various embodiments of this application can be integrated into one processing unit, or each unit can be a separate unit, or two or more units can be integrated into one unit; the integrated unit can be implemented in hardware or in the form of hardware plus software functional units.
[0197] Those skilled in the art will understand that all or part of the steps of the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it performs the steps of the above method embodiments. The aforementioned storage medium includes various media that can store program code, such as mobile storage devices, read-only memory (ROM), magnetic disks, or optical disks.
[0198] Alternatively, if the integrated units described above are implemented as software functional modules and sold or used as independent products, they can also be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the embodiments of this application, or the parts that contribute to related technologies, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause an electronic device to execute all or part of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as mobile storage devices, ROMs, magnetic disks, or optical disks.
[0199] The above description is merely an embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.
Claims
1. An information processing method, characterized in that, The method includes: When the parent process of the installation process starts, in response to the installation operation for the first application, the installation process created by the first application is obtained; Based on the installation process, determine the attribute information of the installation process; the attribute information includes the parent process ID of the installation process; The installation operation for the first application is determined based on the parent process ID of the installation process. Determining whether the installation operation for the first application is a bundled installation operation based on the parent process ID of the installation process includes: Determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process; If the parent process does not belong to the operating system's resource manager, obtain the identifier of the second application corresponding to the parent process ID; Based on the identifier of the second application, authorization information is determined, wherein the authorization information is information on the bundled installation of the first application obtained during the installation process of the second application; If the authorization information does not include the identifier of the first application, the installation operation for the first application is determined to be a bundled installation operation.
2. The method according to claim 1, characterized in that, The method further includes: If the parent process belongs to the operating system's resource manager, the installation operation for the first application is determined to be a legitimate installation operation.
3. The method according to claim 1, characterized in that, The step of determining authorization information based on the identifier of the second application, wherein the authorization information includes information on bundled installation of the first application obtained during the installation process of the second application, including: Monitor the installation process of the second application; If at least one checkbox appears in the installation window of the second application, the target checkbox is determined based on the selection operation of at least one of the at least one checkbox; Obtain the label information of the target checkbox, which serves as the authorization information for the bundled installation of the first application obtained during the installation process of the second application.
4. The method according to claim 1, characterized in that, If the parent process belongs to the operating system's resource manager, and the installation operation for the first application is determined to be a legitimate installation operation, the step of determining the attribute information of the installation process based on the installation process includes: determining the digital signature of the installation process based on the installation process. The method further includes: Monitor the installation process of the first application and obtain the digital signature of the child processes of the installation process; If the digital signature of the installation process is different from the digital signature of the child process, the installation operation of the third application corresponding to the child process is determined to be a bundled installation operation.
5. The method according to any one of claims 1 to 4, characterized in that, The method further includes: If it is determined that the installation operation for the first application is a bundled installation operation, terminate the installation of the first application; or, If it is determined that the installation operation for the first application is a bundled installation operation, a prompt message is displayed; the prompt message is used to inform the user that the first application is a bundled application.
6. An information processing device, characterized in that, The device includes: The first obtaining module is configured to obtain the installation process created by the first application in response to an installation operation for the first application when the parent process of the installation process starts. The first determining module is used to determine the attribute information of the installation process based on the installation process; the attribute information includes the parent process ID of the installation process; The first determining unit is used to determine whether the parent process belongs to the operating system's resource manager based on the parent process ID of the installation process. The first acquisition subunit is used to obtain the identifier of the second application corresponding to the parent process ID if the parent process does not belong to the resource manager of the operating system. The first determining subunit is configured to determine authorization information based on the identifier of the second application, wherein the authorization information is information on the bundled installation of the first application obtained during the installation process of the second application; The second determining subunit is configured to determine that the installation operation for the first application is a bundled installation operation if the authorization information does not include the identifier of the first application. The second determining module is used to determine, based on the attribute information, whether the installation operation for the first application is a bundled installation operation.
7. An electronic device, characterized in that, include: Memory, used to store executable instructions; A processor, when executing executable instructions stored in the memory, implements the method according to any one of claims 1 to 5.
8. A computer-readable storage medium, characterized in that, It stores executable instructions for implementing the method of any one of claims 1 to 5 when executed by a processor.
Citation Information
Patent Citations
Method and device for processing malicious bundled software and mobile terminal
CN104123490A
Application program processing method and device and electronic equipment
CN105787302A